Information Security Risk Manager

• Lead enterprise-wide information security assurance, governance, risk, compliance, and business continuity programs, ensuring alignment with internal policies and regulatory requirements.
  
• Perform and manage information security and cloud risk assessments across AWS and Azure, identify business impact, define mitigation strategies, and communicate risks in clear business terms.
  
• Establish, implement, and maintain security governance frameworks, controls, and metrics, ensuring cyber risks and vulnerabilities are prioritized and remediated within agreed SLAs.
  
• Own ISMS governance and audits, including internal and external audits, gap analysis, compliance readiness, and corrective actions for ISO/IEC 27001, PCI DSS, NIS 2, and other regulatory standards.
  
• Develop, manage, and maintain Business Continuity Planning (BCP) and Disaster Recovery programs to ensure organizational resilience.
  
• Manage third-party security risk, including vendor due diligence, security requirements in contracts, cloud and security tooling assessments (GRC tools, CASB), and coordination of external audits and remediation plans.
  
• Develop, update, and govern information security policies, procedures, standards, and security awareness programs, ensuring continuous improvement and regulatory alignment.
  

Requirements

• Information Security Risk Management & Security Assurance
  
• Governance, Risk & Compliance (GRC)
  
• ISMS, ISO/IEC 27001
  
• PCI DSS, NIS 2, Regulatory Compliance
  
• Cloud Security – AWS & Azure
  
• Security Audits & IT Auditing
  
• Business Continuity Planning (BCP) & Disaster Recovery
  
• Cyber Risk Assessment & Compliance Monitoring
  

• 10+ years of experience in Information Security / GRC / Risk Management
  
• Exposure to Telecom, BFSI, or large enterprise environments
  
• Certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor / Implementer preferred